$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: G0zCH0F3NjzLxTdCIvjAAw3HJk+9VpjU4kYEtPO/LzM= Subject key identifier: EC:5F:A7:66:8A:C1:75:0C:3B:0E:EE:03:69:5C:17:B2:AD:AA:AD:E5 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 1299 Signing time: Thu 24 Apr 2025 17:05:55 +0000 Manifest this update: Thu 24 Apr 2025 17:05:54 +0000 Manifest next update: Thu 01 May 2025 17:05:54 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: CvrB1wz3YpKZGR51lVP67L/ocdSEvv0xAMh6ng149I8=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: HkQW1ELmD+iLXWXgNsuJGsFujvrmVSrBFXmyCQkIzxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4770 (0x12a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Apr 24 17:05:54 2025 GMT Not After : May 1 17:05:54 2025 GMT Subject: CN=680a6f73-85b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:52:9c:10:d6:aa:9c:92:84:56:36:f4:f7: bb:c0:96:42:f1:f6:5a:fd:9c:5c:fe:1b:c3:d2:81: 8c:22:49:bd:20:b2:be:83:4c:de:a4:8b:62:a5:c9: ed:d8:a8:ea:47:8a:2a:d3:72:85:d0:0c:f2:1d:ef: 62:15:9e:b6:da:6e:71:d6:46:ae:dc:74:dc:c3:bf: 40:22:f9:82:94:a9:fc:31:5f:50:b0:50:c7:6d:f1: 64:16:c8:9c:21:1d:94:4f:78:ee:5e:c2:27:0e:34: 46:f6:ae:ea:85:c3:5b:c6:61:ee:0c:64:ca:81:9e: e8:75:28:7a:df:5e:1f:ad:90:c8:fd:4b:23:a7:47: 25:93:85:ae:b6:4b:73:49:d3:a6:ce:e8:f9:2e:8f: f9:4f:f6:7c:59:f0:13:ab:34:d3:e0:a5:55:7d:65: 4c:07:74:48:de:ae:e2:0c:1c:f8:64:d0:9d:95:fa: fa:39:af:66:0b:10:04:4e:99:35:71:05:2e:c5:04: 23:b0:a9:04:d0:c0:71:17:92:b7:ec:12:87:da:9f: 75:d6:14:ae:8e:92:ab:c6:35:4b:b0:9a:13:83:ff: e8:81:91:33:60:fd:fa:d1:78:d1:c1:0e:69:81:c4: 8d:23:3c:10:05:a9:dd:1b:e9:5e:14:0d:e3:f0:07: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5F:A7:66:8A:C1:75:0C:3B:0E:EE:03:69:5C:17:B2:AD:AA:AD:E5 X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:38:4d:a6:1b:7b:10:ff:0f:a1:93:d3:fa:36:2f:28:aa:c3: 55:2a:83:7f:6b:04:ac:41:96:0d:9a:95:d1:c7:cf:b6:eb:9e: 5e:df:e2:4f:48:2f:3d:17:61:f7:c6:0a:2b:5b:ef:b2:c9:f8: 74:45:6a:fd:70:e6:ac:79:8c:5c:6a:1a:c7:d1:e0:38:ca:78: aa:3a:12:7c:c5:2a:13:d0:b8:38:01:19:18:14:f2:b1:b2:06: 37:41:ae:d3:4f:73:af:90:88:1f:c1:c5:f6:83:7b:20:e2:d8: d2:36:4d:77:49:e3:e9:13:86:cd:d2:c4:b9:b8:11:eb:d4:28: 2d:8d:b1:ea:8c:4b:4e:a0:6a:a3:b2:7f:ae:2b:e3:f5:8e:8b: 5a:77:be:79:81:78:44:5a:4c:93:42:a7:6d:18:6f:f7:2f:6b: b9:04:a5:b8:a0:bd:0f:1e:3f:5c:d6:b9:b8:6b:92:64:66:98: d5:22:86:68:73:e4:dc:15:e2:b3:ef:26:a7:11:b6:ec:79:90: fc:58:c1:02:b1:0f:1c:51:a5:e7:80:29:66:05:f9:d5:86:a8: 4f:2e:c4:84:d3:4f:b9:40:81:6e:bf:78:0f:3c:69:29:ec:6d: 21:01:f2:57:82:1b:8f:43:bc:ff:b0:6e:aa:6f:b6:9a:46:47: 8e:34:e3:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwNDI0MTcwNTU0WhcNMjUwNTAxMTcwNTU0WjAYMRYwFAYD VQQDEw02ODBhNmY3My04NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9JSnBDWqpyShFY29Pe7wJZC8fZa/Zxc/hvD0oGMIkm9ILK+g0zepItipcnt 2KjqR4oq03KF0AzyHe9iFZ622m5x1kau3HTcw79AIvmClKn8MV9QsFDHbfFkFsic IR2UT3juXsInDjRG9q7qhcNbxmHuDGTKgZ7odSh6314frZDI/Usjp0clk4Wutktz SdOmzuj5Lo/5T/Z8WfATqzTT4KVVfWVMB3RI3q7iDBz4ZNCdlfr6Oa9mCxAETpk1 cQUuxQQjsKkE0MBxF5K37BKH2p911hSujpKrxjVLsJoTg//ogZEzYP360XjRwQ5p gcSNIzwQBandG+leFA3j8AeefQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxfp2aK wXUMOw7uA2lcF7Ktqq3lMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdOE2mG3sQ/w+hk9P6Ni8oqsNVKoN/awSsQZYNmpXRx8+2655e3+JP SC89F2H3xgorW++yyfh0RWr9cOaseYxcahrH0eA4yniqOhJ8xSoT0Lg4ARkYFPKx sgY3Qa7TT3OvkIgfwcX2g3sg4tjSNk13SePpE4bN0sS5uBHr1CgtjbHqjEtOoGqj sn+uK+P1jotad755gXhEWkyTQqdtGG/3L2u5BKW4oL0PHj9c1rm4a5JkZpjVIoZo c+TcFeKz7yanEbbseZD8WMECsQ8cUaXngClmBfnVhqhPLsSE00+5QIFuv3gPPGkp 7G0hAfJXghuPQ7z/sG6qb7aaRkeONOO4 -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:22 2025 by rpki-client